Install Firestarter.
Click on, "Policy".
Right click on the white area for "Allow service Port".
Choose "Add rule"
In the option for port, enter,( 5800-5900 ). The name will enter "VNC"
Choose whom you will allow.